[Vtigercrm-commits] [vtiger development] #649: Security Bug at My Preferences

[vtiger development]

#649: Security Bug at My Preferences
-----------------------+----------------------------------------------------
 Reporter:  Balduin    |       Owner:  developer
     Type:  defect     |      Status:  new      
 Priority:  blocker    |   Milestone:           
Component:  vtigercrm  |     Version:  5.0.0    
 Keywords:             |  
-----------------------+----------------------------------------------------
 Even a user without admin privileges is currently allowed to edit the user
 setting including the role assignment. That is wrong. Any user should
 '''only''' be allowed to:[[BR]]
 - change the password[[BR]]
 - change or add photos [[BR]]
 - change everything that is listed under My Defaults[[BR]]
 - change everything that is listed under My Designation & Contact
 Details[[BR]]
 - change everything that is listed under My Postal Address[[BR]]

-- 
Ticket URL: <http://vtiger.fosslabs.com/cgi-bin/trac.cgi/ticket/649>
vtiger development <http://vtiger.fosslabs.com/>
vtigerCRM